1. Home
  2. CVE Database
  3. CVE-2025-62187
LOW · 2.9

CVE-2025-62187

In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux (media file pathnames are not necessarily relative to the me...

Vulnerability Description

In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux (media file pathnames are not necessarily relative to the media folder).

CVSS Score

2.9

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AnkitectsAnki< 25.02.6

Related Weaknesses (CWE)

CWE-23

References

FAQ

What is CVE-2025-62187?

CVE-2025-62187 is a vulnerability with a CVSS score of 2.9 (LOW). In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux (media file pathnames are not necessarily relative to the me...

How severe is CVE-2025-62187?

CVE-2025-62187 has been rated LOW with a CVSS base score of 2.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-62187?

Check the references section above for vendor advisories and patch information. Affected products include: Ankitects Anki.